{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:CMNLC344IOOQGOZKUDJDJLNP2C","short_pith_number":"pith:CMNLC344","canonical_record":{"source":{"id":"2311.17339","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2023-11-29T03:37:14Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"b38c676b796b4243ed1a81fe195c60f1b54ea753ef874d74dc87b972c6c6b66b","abstract_canon_sha256":"6b74cf038bc642eee7469031f83e99067a0a5c5ad555df58eb74394bbe423dba"},"schema_version":"1.0"},"canonical_sha256":"131ab16f9c439d033b2aa0d234adafd08e66094d3c5e58042633f45b77850bb8","source":{"kind":"arxiv","id":"2311.17339","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2311.17339","created_at":"2026-07-05T07:18:01Z"},{"alias_kind":"arxiv_version","alias_value":"2311.17339v1","created_at":"2026-07-05T07:18:01Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2311.17339","created_at":"2026-07-05T07:18:01Z"},{"alias_kind":"pith_short_12","alias_value":"CMNLC344IOOQ","created_at":"2026-07-05T07:18:01Z"},{"alias_kind":"pith_short_16","alias_value":"CMNLC344IOOQGOZK","created_at":"2026-07-05T07:18:01Z"},{"alias_kind":"pith_short_8","alias_value":"CMNLC344","created_at":"2026-07-05T07:18:01Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:CMNLC344IOOQGOZKUDJDJLNP2C","target":"record","payload":{"canonical_record":{"source":{"id":"2311.17339","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2023-11-29T03:37:14Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"b38c676b796b4243ed1a81fe195c60f1b54ea753ef874d74dc87b972c6c6b66b","abstract_canon_sha256":"6b74cf038bc642eee7469031f83e99067a0a5c5ad555df58eb74394bbe423dba"},"schema_version":"1.0"},"canonical_sha256":"131ab16f9c439d033b2aa0d234adafd08e66094d3c5e58042633f45b77850bb8","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T07:18:01.696894Z","signature_b64":"nTOLQNRupgbPXg8ze/jrFwmIMzpIsuH11BVzHI4kIRp3JDVvpi8XADcGtgHk+6Rzohi8u/MJokLRXHn0JUU4AA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"131ab16f9c439d033b2aa0d234adafd08e66094d3c5e58042633f45b77850bb8","last_reissued_at":"2026-07-05T07:18:01.696408Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T07:18:01.696408Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2311.17339","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:18:01Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"1WNUAt4P1TmjpNGzt1dTbN/qtTREo+2jm3T8FE9gIfIqN5zmuHdijUIN2FO/8TMEkk2VOWoCtXGZGl2albAuBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-20T18:26:52.384963Z"},"content_sha256":"5aa8aeda889c31b87388a5e24c647b9fb3033508b8b55853657ba21554de75bd","schema_version":"1.0","event_id":"sha256:5aa8aeda889c31b87388a5e24c647b9fb3033508b8b55853657ba21554de75bd"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:CMNLC344IOOQGOZKUDJDJLNP2C","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"RADAP: A Robust and Adaptive Defense Against Diverse Adversarial Patches on Face Recognition","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.CV","authors_text":"Changhai Nie, Furao Shen, Jian Zhao, Xiaoliang Liu","submitted_at":"2023-11-29T03:37:14Z","abstract_excerpt":"Face recognition (FR) systems powered by deep learning have become widely used in various applications. However, they are vulnerable to adversarial attacks, especially those based on local adversarial patches that can be physically applied to real-world objects. In this paper, we propose RADAP, a robust and adaptive defense mechanism against diverse adversarial patches in both closed-set and open-set FR systems. RADAP employs innovative techniques, such as FCutout and F-patch, which use Fourier space sampling masks to improve the occlusion robustness of the FR model and the performance of the "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2311.17339","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2311.17339/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:18:01Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"hPtdsrYLaS+pVU9+pW5+EspRghAbtuTKLp3il0Q70jFSCtaCJJ7X1Jari9+bxCreR84cQKhg1zwNlmHa1RpfDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-20T18:26:52.385380Z"},"content_sha256":"f0d8bdb88466d2d711fa504bf859e6ed6921eb50df86fef4f444210e003b176c","schema_version":"1.0","event_id":"sha256:f0d8bdb88466d2d711fa504bf859e6ed6921eb50df86fef4f444210e003b176c"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/CMNLC344IOOQGOZKUDJDJLNP2C/bundle.json","state_url":"https://pith.science/pith/CMNLC344IOOQGOZKUDJDJLNP2C/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/CMNLC344IOOQGOZKUDJDJLNP2C/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-20T18:26:52Z","links":{"resolver":"https://pith.science/pith/CMNLC344IOOQGOZKUDJDJLNP2C","bundle":"https://pith.science/pith/CMNLC344IOOQGOZKUDJDJLNP2C/bundle.json","state":"https://pith.science/pith/CMNLC344IOOQGOZKUDJDJLNP2C/state.json","well_known_bundle":"https://pith.science/.well-known/pith/CMNLC344IOOQGOZKUDJDJLNP2C/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:CMNLC344IOOQGOZKUDJDJLNP2C","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"6b74cf038bc642eee7469031f83e99067a0a5c5ad555df58eb74394bbe423dba","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2023-11-29T03:37:14Z","title_canon_sha256":"b38c676b796b4243ed1a81fe195c60f1b54ea753ef874d74dc87b972c6c6b66b"},"schema_version":"1.0","source":{"id":"2311.17339","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2311.17339","created_at":"2026-07-05T07:18:01Z"},{"alias_kind":"arxiv_version","alias_value":"2311.17339v1","created_at":"2026-07-05T07:18:01Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2311.17339","created_at":"2026-07-05T07:18:01Z"},{"alias_kind":"pith_short_12","alias_value":"CMNLC344IOOQ","created_at":"2026-07-05T07:18:01Z"},{"alias_kind":"pith_short_16","alias_value":"CMNLC344IOOQGOZK","created_at":"2026-07-05T07:18:01Z"},{"alias_kind":"pith_short_8","alias_value":"CMNLC344","created_at":"2026-07-05T07:18:01Z"}],"graph_snapshots":[{"event_id":"sha256:f0d8bdb88466d2d711fa504bf859e6ed6921eb50df86fef4f444210e003b176c","target":"graph","created_at":"2026-07-05T07:18:01Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2311.17339/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Face recognition (FR) systems powered by deep learning have become widely used in various applications. However, they are vulnerable to adversarial attacks, especially those based on local adversarial patches that can be physically applied to real-world objects. In this paper, we propose RADAP, a robust and adaptive defense mechanism against diverse adversarial patches in both closed-set and open-set FR systems. RADAP employs innovative techniques, such as FCutout and F-patch, which use Fourier space sampling masks to improve the occlusion robustness of the FR model and the performance of the ","authors_text":"Changhai Nie, Furao Shen, Jian Zhao, Xiaoliang Liu","cross_cats":["cs.CR"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2023-11-29T03:37:14Z","title":"RADAP: A Robust and Adaptive Defense Against Diverse Adversarial Patches on Face Recognition"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2311.17339","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:5aa8aeda889c31b87388a5e24c647b9fb3033508b8b55853657ba21554de75bd","target":"record","created_at":"2026-07-05T07:18:01Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"6b74cf038bc642eee7469031f83e99067a0a5c5ad555df58eb74394bbe423dba","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2023-11-29T03:37:14Z","title_canon_sha256":"b38c676b796b4243ed1a81fe195c60f1b54ea753ef874d74dc87b972c6c6b66b"},"schema_version":"1.0","source":{"id":"2311.17339","kind":"arxiv","version":1}},"canonical_sha256":"131ab16f9c439d033b2aa0d234adafd08e66094d3c5e58042633f45b77850bb8","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"131ab16f9c439d033b2aa0d234adafd08e66094d3c5e58042633f45b77850bb8","first_computed_at":"2026-07-05T07:18:01.696408Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T07:18:01.696408Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"nTOLQNRupgbPXg8ze/jrFwmIMzpIsuH11BVzHI4kIRp3JDVvpi8XADcGtgHk+6Rzohi8u/MJokLRXHn0JUU4AA==","signature_status":"signed_v1","signed_at":"2026-07-05T07:18:01.696894Z","signed_message":"canonical_sha256_bytes"},"source_id":"2311.17339","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:5aa8aeda889c31b87388a5e24c647b9fb3033508b8b55853657ba21554de75bd","sha256:f0d8bdb88466d2d711fa504bf859e6ed6921eb50df86fef4f444210e003b176c"],"state_sha256":"c84164ee06c319da4e0fe666afd3cd9d16410474f8658db2734ac068205e47b2"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"W3jGIX0grN9Z+altdNqWMrL2FNtj0P34H0OpxIIKUENZsvksSYhMoqs2AMei5QaAct/q5AZ/3u+YYnNetAM8Aw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-20T18:26:52.387830Z","bundle_sha256":"8d394fd0c7d984bc3d14cbf458e57a7c199a67bb1792afda1198c88546666d02"}}